Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
File: vKs-dvhO1DdC8qCBJCcI55nOG18.cer (raw, json)
Hash identifier: l2v4DZvcAaDrgq0Ks5xoRMwqAIpQY2GP3aLowvTFdRc=
Subject key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01ED94
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Apr 2024 03:41:31 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 45652
IP: 43.252.120.0/22
IP: 103.233.80.0/22
IP: 110.34.128.0/17
IP: 2401:4a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126356 (0x1ed94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 26 03:41:31 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:1a:bc:51:41:64:89:3c:1d:83:e1:1b:93:
66:81:65:3e:03:42:9b:e6:0c:9a:c0:d8:18:6b:7a:
d8:85:33:e7:77:fc:fe:38:35:61:9e:3b:47:22:ea:
65:71:df:b0:c0:91:18:53:24:ed:ff:96:dc:12:13:
cd:09:e7:5c:ff:2e:de:db:c8:6f:32:25:fa:b3:8c:
3b:66:01:34:7a:8e:2f:e3:da:e9:bb:f4:f6:5b:87:
8a:47:be:e0:2f:3a:13:04:41:1c:ec:08:18:a5:b2:
81:ed:9f:f3:85:2c:10:be:ba:37:83:17:b0:28:54:
a0:e8:77:a3:0c:ba:1e:92:d8:70:cd:43:d8:98:59:
a7:fd:a1:74:a8:7c:92:50:19:5f:52:a6:85:ba:38:
54:3f:76:d0:f0:05:cc:bd:57:8e:7a:48:d4:a8:09:
13:dc:af:b1:ca:e4:72:c4:c0:7f:5e:17:1f:0c:14:
4a:de:75:4a:3f:c8:84:fd:fa:55:e5:98:63:2f:6f:
50:d5:a7:d0:af:e1:3c:19:79:db:bd:23:76:cc:3e:
88:f7:cc:3f:a5:8e:e8:45:df:9e:7c:9a:61:d0:06:
ce:dc:92:79:cc:cd:94:51:93:a8:09:60:70:5d:2c:
5c:da:4b:ed:93:1e:d3:fe:b7:8a:ae:5e:4e:91:9d:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45652
sbgp-ipAddrBlock: critical
IPv4:
43.252.120.0/22
103.233.80.0/22
110.34.128.0/17
IPv6:
2401:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
68:41:c9:ca:bb:44:96:25:19:bb:33:34:21:c9:01:e4:47:37:
d6:39:9d:42:9f:f2:f4:90:f4:54:7c:09:c4:a6:01:fc:91:9e:
88:0b:55:15:d2:89:a2:e4:89:59:f8:2f:0c:d2:18:e8:a8:b8:
95:1d:50:bd:e7:bd:e2:2b:ce:98:b0:0b:d3:e0:98:14:ca:3f:
a0:43:9d:e9:88:7d:50:b4:b8:e2:a5:1b:51:d8:f0:4f:0b:55:
a1:1a:9f:30:45:8b:53:4f:c7:8a:6b:25:16:8c:04:48:05:d4:
d6:fa:68:eb:b9:e7:60:f8:2c:9f:4a:7b:68:30:5a:af:75:04:
8a:ab:d3:86:ac:6c:d6:98:85:1f:c9:5c:7b:58:a4:11:f2:f2:
6a:f6:88:55:9f:8e:87:c0:a4:b9:1c:7e:18:01:59:d2:f2:3a:
3e:3b:55:c2:94:a5:56:31:2f:70:d6:fa:a4:16:7b:0b:50:cf:
87:83:22:e1:a1:57:c1:7e:d4:a4:1e:bd:80:f9:49:21:6e:f2:
e7:8a:6d:34:6f:a3:4e:68:4b:72:4b:0b:77:55:17:6c:69:e2:
48:85:7f:5b:99:52:cb:9b:8c:a1:9e:fb:3f:d6:91:33:b0:09:
d7:04:51:9c:57:d9:ab:81:17:45:22:84:37:4e:97:c2:90:9c:
36:a0:19:fa
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDAe2UMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQyNjAzNDEzMVoXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4
MTI0MjcwOEU3OTlDRTFCNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCYBq8UUFkiTwdg+Ebk2aBZT4DQpvmDJrA2BhretiFM+d3/P44NWGeO0ci6mVx
37DAkRhTJO3/ltwSE80J51z/Lt7byG8yJfqzjDtmATR6ji/j2um79PZbh4pHvuAv
OhMEQRzsCBilsoHtn/OFLBC+ujeDF7AoVKDod6MMuh6S2HDNQ9iYWaf9oXSofJJQ
GV9SpoW6OFQ/dtDwBcy9V456SNSoCRPcr7HK5HLEwH9eFx8MFEredUo/yIT9+lXl
mGMvb1DVp9Cv4TwZedu9I3bMPoj3zD+ljuhF3558mmHQBs7cknnMzZRRk6gJYHBd
LFzaS+2THtP+t4quXk6RnT0VAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUvKs+dvhO
1DdC8qCBJCcI55nOG18wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFDNTMyL0RBQTBEMEI0MDM3RTExRUY4NTIwRTc1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBQzUzMi9EQUEwRDBCNDAzN0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZo
TzFEZEM4cUNCSkNjSTU1bk9HMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALJUMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCK/x4AwQCZ+lQ
AwQHbiKAMA0EAgACMAcDBQAkAUpAMA0GCSqGSIb3DQEBCwUAA4IBAQBoQcnKu0SW
JRm7MzQhyQHkRzfWOZ1Cn/L0kPRUfAnEpgH8kZ6IC1UV0omi5IlZ+C8M0hjoqLiV
HVC9573iK86YsAvT4JgUyj+gQ53piH1QtLjipRtR2PBPC1WhGp8wRYtTT8eKayUW
jARIBdTW+mjruedg+CyfSntoMFqvdQSKq9OGrGzWmIUfyVx7WKQR8vJq9ohVn46H
wKS5HH4YAVnS8jo+O1XClKVWMS9w1vqkFnsLUM+HgyLhoVfBftSkHr2A+UkhbvLn
im00b6NOaEtySwt3VRdsaeJIhX9bmVLLm4yhnvs/1pEzsAnXBFGcV9mrgRdFIoQ3
TpfCkJw2oBn6
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:51:10 2024 by rpki-client on console-ams.rpki-client.org